3 ms·

Nothing new here, this is an old technique that already exploded a while back. The Mozilla team said they would be removing this "security hole", I don't know i

by ZoFreX 16y ago

Nothing new here, this is an old technique that already exploded a while back. The Mozilla team said they would be removing this "security hole", I don't know if they have yet. What most reporting on it fails to cover is the nature of the "history sniffing". They cannot view your browser history. What they can do is query specific URLs against a black box that either says "yes" or "no" to the question "has this user been to this exact URL at some point in the past?"

JacobAldridge 16y ago
Here's Mozilla's linked post on this, from March of this year - http://blog.mozilla.com/security/2010/03/31/plugging-the-css-history-leak/ http://blog.mozilla.com/security/2010/03/31/plugging-the-css... To support your statement, I haven't found anything saying this has been removed.
- fhars 16y ago
  There seems to be a partial fix in the 4.0 codebase: https://bugzilla.mozilla.org/show_bug.cgi?id=147777#c259 https://bugzilla.mozilla.org/show_bug.cgi?id=147777#c259
  - sid0 16y ago
    Yeah, sites like http://www.didyouwatchporn.com/ http://www.didyouwatchporn.com/ and http://ha.ckers.org/weird/CSS-history-hack.html http://ha.ckers.org/weird/CSS-history-hack.html fail to work in Firefox 4. The followup bugs are more to do with tuning what is allowed and what isn't, e.g. https://bugzilla.mozilla.org/show_bug.cgi?id=559722 https://bugzilla.mozilla.org/show_bug.cgi?id=559722.
andrewgph 16y ago
The styling of a:visited elements seems to have been removed in Chromium, there's some discussion of this here: http://code.google.com/p/chromium/issues/detail?id=56802 http://code.google.com/p/chromium/issues/detail?id=56802 So I don't think history sniffing using this method is possible anymore in Chromium. I disappointingly found this out when playing around with facebook history sniffing, so if anyone thinks I'm wrong please let me know!

by ZoFreX 16y ago

JacobAldridge 16y ago

Here's Mozilla's linked post on this, from March of this year - http://blog.mozilla.com/security/2010/03/31/plugging-the-css-history-leak/ http://blog.mozilla.com/security/2010/03/31/plugging-the-css... To support your statement, I haven't found anything saying this has been removed.

fhars 16y ago
There seems to be a partial fix in the 4.0 codebase: https://bugzilla.mozilla.org/show_bug.cgi?id=147777#c259 https://bugzilla.mozilla.org/show_bug.cgi?id=147777#c259
- sid0 16y ago
  Yeah, sites like http://www.didyouwatchporn.com/ http://www.didyouwatchporn.com/ and http://ha.ckers.org/weird/CSS-history-hack.html http://ha.ckers.org/weird/CSS-history-hack.html fail to work in Firefox 4. The followup bugs are more to do with tuning what is allowed and what isn't, e.g. https://bugzilla.mozilla.org/show_bug.cgi?id=559722 https://bugzilla.mozilla.org/show_bug.cgi?id=559722.

andrewgph 16y ago

The styling of a:visited elements seems to have been removed in Chromium, there's some discussion of this here: http://code.google.com/p/chromium/issues/detail?id=56802 http://code.google.com/p/chromium/issues/detail?id=56802 So I don't think history sniffing using this method is possible anymore in Chromium. I disappointingly found this out when playing around with facebook history sniffing, so if anyone thinks I'm wrong please let me know!